[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 50.254616][ T23] audit: type=1800 audit(1578451422.208:25): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 50.273583][ T23] audit: type=1800 audit(1578451422.218:26): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 50.329131][ T23] audit: type=1800 audit(1578451422.218:27): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.161' (ECDSA) to the list of known hosts. 2020/01/08 02:43:53 fuzzer started 2020/01/08 02:43:55 dialing manager at 10.128.0.26:35703 2020/01/08 02:43:55 syscalls: 2824 2020/01/08 02:43:55 code coverage: enabled 2020/01/08 02:43:55 comparison tracing: enabled 2020/01/08 02:43:55 extra coverage: enabled 2020/01/08 02:43:55 setuid sandbox: enabled 2020/01/08 02:43:55 namespace sandbox: enabled 2020/01/08 02:43:55 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 02:43:55 fault injection: enabled 2020/01/08 02:43:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 02:43:55 net packet injection: enabled 2020/01/08 02:43:55 net device setup: enabled 2020/01/08 02:43:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 02:43:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:43:56 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0x1, 0x1}, 0x20) 02:43:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') syzkaller login: [ 65.064314][ T8523] IPVS: ftp: loaded support on port[0] = 21 [ 65.220698][ T8523] chnl_net:caif_netlink_parms(): no params data found 02:43:57 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000240), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080), 0xc) [ 65.274951][ T8523] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.282801][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.291748][ T8523] device bridge_slave_0 entered promiscuous mode [ 65.309245][ T8523] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.318740][ T8527] IPVS: ftp: loaded support on port[0] = 21 [ 65.330914][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.339674][ T8523] device bridge_slave_1 entered promiscuous mode [ 65.385334][ T8523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.409001][ T8523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.482241][ T8523] team0: Port device team_slave_0 added [ 65.508093][ T8523] team0: Port device team_slave_1 added [ 65.520338][ T8529] IPVS: ftp: loaded support on port[0] = 21 [ 65.547280][ T8527] chnl_net:caif_netlink_parms(): no params data found 02:43:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/81, 0x51}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 65.598470][ T8523] device hsr_slave_0 entered promiscuous mode [ 65.637511][ T8523] device hsr_slave_1 entered promiscuous mode [ 65.755803][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.766031][ T8527] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.775629][ T8527] device bridge_slave_0 entered promiscuous mode [ 65.799329][ T8527] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.807409][ T8527] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.815111][ T8527] device bridge_slave_1 entered promiscuous mode [ 65.864585][ T8532] IPVS: ftp: loaded support on port[0] = 21 [ 65.885169][ T8527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 02:43:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0xf764}, 0x10) write(r0, &(0x7f0000000200)="200000001a00010000000066835f7f081c000300000000000000000004001300", 0x20) [ 65.928605][ T8527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.955857][ T8529] chnl_net:caif_netlink_parms(): no params data found [ 65.990300][ T8523] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.077799][ T8523] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.130605][ T8523] netdevsim netdevsim0 netdevsim2: renamed from eth2 02:43:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf000}, 0x6b9, &(0x7f0000000200)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x42e}}, 0x0) [ 66.184859][ T8527] team0: Port device team_slave_0 added [ 66.198882][ T8523] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.266001][ T8535] IPVS: ftp: loaded support on port[0] = 21 [ 66.272936][ T8527] team0: Port device team_slave_1 added [ 66.333918][ T8537] IPVS: ftp: loaded support on port[0] = 21 [ 66.378646][ T8527] device hsr_slave_0 entered promiscuous mode [ 66.427490][ T8527] device hsr_slave_1 entered promiscuous mode [ 66.496482][ T8527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.504169][ T8527] Cannot create hsr debugfs directory [ 66.522322][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.529852][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.537611][ T8529] device bridge_slave_0 entered promiscuous mode [ 66.593831][ T8532] chnl_net:caif_netlink_parms(): no params data found [ 66.603740][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.612532][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.620221][ T8529] device bridge_slave_1 entered promiscuous mode [ 66.664110][ T8523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.714023][ T8532] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.722517][ T8532] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.730320][ T8532] device bridge_slave_0 entered promiscuous mode [ 66.750148][ T8529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.765279][ T8529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.775503][ T8532] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.783505][ T8532] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.791395][ T8532] device bridge_slave_1 entered promiscuous mode [ 66.810827][ T8532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.835842][ T8529] team0: Port device team_slave_0 added [ 66.844870][ T8529] team0: Port device team_slave_1 added [ 66.857092][ T8532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.881959][ T8532] team0: Port device team_slave_0 added [ 66.938055][ T8529] device hsr_slave_0 entered promiscuous mode [ 66.977090][ T8529] device hsr_slave_1 entered promiscuous mode [ 67.016574][ T8529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.024206][ T8529] Cannot create hsr debugfs directory [ 67.047064][ T8532] team0: Port device team_slave_1 added [ 67.065318][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.073877][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.121627][ T8537] chnl_net:caif_netlink_parms(): no params data found [ 67.167665][ T8523] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.175283][ T8527] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.221284][ T8527] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.282251][ T8527] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.379325][ T8532] device hsr_slave_0 entered promiscuous mode [ 67.416887][ T8532] device hsr_slave_1 entered promiscuous mode [ 67.456551][ T8532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.464147][ T8532] Cannot create hsr debugfs directory [ 67.481337][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.489838][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.498383][ T2873] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.505535][ T2873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.522012][ T8527] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.578141][ T8535] chnl_net:caif_netlink_parms(): no params data found [ 67.596170][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.620494][ T8537] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.628002][ T8537] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.635564][ T8537] device bridge_slave_0 entered promiscuous mode [ 67.664029][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.674566][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.683180][ T2758] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.690278][ T2758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.703060][ T8537] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.710566][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.718780][ T8537] device bridge_slave_1 entered promiscuous mode [ 67.749427][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.759130][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.768543][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.777516][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.787935][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.835167][ T8537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.852133][ T8529] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.908962][ T8535] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.916148][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.924041][ T8535] device bridge_slave_0 entered promiscuous mode [ 67.932030][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.940931][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.962371][ T8537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.977650][ T8529] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.040212][ T8535] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.047354][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.054984][ T8535] device bridge_slave_1 entered promiscuous mode [ 68.065178][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.073909][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.082861][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.091270][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.102471][ T8523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.118327][ T8529] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.151842][ T8529] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.238562][ T8537] team0: Port device team_slave_0 added [ 68.251358][ T8537] team0: Port device team_slave_1 added [ 68.263945][ T8532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.330186][ T8532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.399314][ T8532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.460182][ T8535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.479040][ T8535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.496168][ T8532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.542400][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.550010][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.577480][ T8523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.629735][ T8537] device hsr_slave_0 entered promiscuous mode [ 68.667514][ T8537] device hsr_slave_1 entered promiscuous mode [ 68.696415][ T8537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.703999][ T8537] Cannot create hsr debugfs directory [ 68.719847][ T8535] team0: Port device team_slave_0 added [ 68.758765][ T8535] team0: Port device team_slave_1 added [ 68.849213][ T8535] device hsr_slave_0 entered promiscuous mode [ 68.887178][ T8535] device hsr_slave_1 entered promiscuous mode [ 68.926528][ T8535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.934120][ T8535] Cannot create hsr debugfs directory [ 68.958013][ T8532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.983720][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.992585][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.008638][ T8527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.034465][ T8529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.042111][ T8537] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.098398][ T8537] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.145247][ T8532] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.165493][ T8529] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.176975][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.184618][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.194032][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.202011][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.209805][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.217907][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.227002][ T8537] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.273791][ T8537] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.348821][ T8527] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.358147][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.367755][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.376120][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.383275][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.391040][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.399600][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.408462][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.415488][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.423047][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.431355][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.439720][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.448400][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.456782][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.463815][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.497657][ T8523] device veth0_vlan entered promiscuous mode [ 69.504395][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.514408][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.523310][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.531189][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.540316][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.549124][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.557491][ T2758] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.564629][ T2758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.572619][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.581597][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.590159][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.598551][ T2758] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.605576][ T2758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.622601][ T8535] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.668090][ T8535] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.730931][ T8535] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.798795][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.806986][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.815411][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.824290][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.832993][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.841914][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.850329][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.858960][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.867372][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.875770][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.885890][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.893642][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.907194][ T8535] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.952732][ T8529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.963374][ T8529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.975921][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.976858][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.977168][ T2752] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.977201][ T2752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.977469][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.978523][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.978824][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.979197][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.979468][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.985631][ T8523] device veth1_vlan entered promiscuous mode [ 70.070142][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.078415][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.087284][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.095722][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.107034][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.160886][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.175283][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.184024][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.198586][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.208631][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.218636][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.227414][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.235585][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.243939][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.252466][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.260887][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.269347][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.277868][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.285328][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.301652][ T8532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.330631][ T8529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.376300][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 175.383136][ C0] rcu: 0-...!: (1 GPs behind) idle=216/1/0x4000000000000002 softirq=13897/13898 fqs=0 [ 175.393027][ C0] (t=10500 jiffies g=6845 q=64) [ 175.397966][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g6845 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 175.409066][ C0] rcu: RCU grace-period kthread stack dump: [ 175.414955][ C0] rcu_preempt R running task 28984 10 2 0x80004000 [ 175.422874][ C0] Call Trace: [ 175.426285][ C0] __schedule+0x9a0/0xcc0 [ 175.430626][ C0] schedule+0x181/0x210 [ 175.434785][ C0] schedule_timeout+0x14f/0x240 [ 175.439641][ C0] ? run_local_timers+0x120/0x120 [ 175.444666][ C0] rcu_gp_kthread+0xed8/0x1770 [ 175.449431][ C0] kthread+0x332/0x350 [ 175.453497][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 175.458613][ C0] ? kthread_blkcg+0xe0/0xe0 [ 175.463202][ C0] ret_from_fork+0x24/0x30 [ 175.467623][ C0] NMI backtrace for cpu 0 [ 175.471961][ C0] CPU: 0 PID: 8529 Comm: syz-executor.2 Not tainted 5.5.0-rc5-syzkaller #0 [ 175.480527][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.490584][ C0] Call Trace: [ 175.493869][ C0] [ 175.496734][ C0] dump_stack+0x1fb/0x318 [ 175.501056][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 175.507730][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 175.513880][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 175.519939][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 175.525996][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 175.532136][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 175.537254][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 175.542446][ C0] ? trace_hardirqs_off+0x74/0x80 [ 175.547465][ C0] update_process_times+0x12d/0x180 [ 175.552659][ C0] tick_sched_timer+0x263/0x420 [ 175.557507][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 175.563042][ C0] __hrtimer_run_queues+0x403/0x840 [ 175.568250][ C0] hrtimer_interrupt+0x38c/0xda0 [ 175.573199][ C0] ? debug_smp_processor_id+0x9/0x20 [ 175.578477][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 175.584188][ C0] apic_timer_interrupt+0xf/0x20 [ 175.589110][ C0] [ 175.592045][ C0] RIP: 0010:free_thread_stack+0x133/0x590 [ 175.597755][ C0] Code: 00 ea ff ff 48 01 c7 be 03 00 00 00 e8 86 91 61 00 e9 5d 04 00 00 e8 3c 2c 2e 00 48 89 df 31 f6 e8 02 8d 6f 00 43 80 3c 2e 00 <74> 08 4c 89 e7 e8 73 94 6a 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 [ 175.617359][ C0] RSP: 0018:ffffc90001e86eb0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 175.625848][ C0] RAX: 0000000000000001 RBX: ffffea000239a2c0 RCX: 0000000000000000 [ 175.633812][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea000239a2c0 [ 175.641775][ C0] RBP: ffffc90001e86ee8 R08: dffffc0000000000 R09: fffffbfff124248a [ 175.649745][ C0] R10: fffffbfff124248a R11: 0000000000000000 R12: ffff8880a45b6ca0 [ 175.657719][ C0] R13: dffffc0000000000 R14: 1ffff110148b6d94 R15: ffff8880975276b8 [ 175.665713][ C0] put_task_stack+0xa3/0x130 [ 175.670301][ C0] finish_task_switch+0x3f1/0x550 [ 175.675347][ C0] __schedule+0x9a8/0xcc0 [ 175.679697][ C0] ? ___preempt_schedule+0x16/0x18 [ 175.684812][ C0] preempt_schedule+0xdb/0x120 [ 175.689573][ C0] ___preempt_schedule+0x16/0x18 [ 175.694506][ C0] ? vprintk_emit+0x2fe/0x3a0 [ 175.699171][ C0] ? vprintk_emit+0x368/0x3a0 [ 175.703856][ C0] vprintk_emit+0x36d/0x3a0 [ 175.708354][ C0] vprintk_default+0x28/0x30 [ 175.712933][ C0] vprintk_func+0x158/0x170 [ 175.717426][ C0] printk+0x62/0x8d [ 175.721227][ C0] ? vlan_device_event+0x160/0x1df0 [ 175.726410][ C0] ? vlan_device_event+0xe9/0x1df0 [ 175.731514][ C0] vlan_device_event+0x1cbf/0x1df0 [ 175.736631][ C0] ? phonet_device_notify+0x1a1/0x790 [ 175.741994][ C0] ? j1939_netdev_notify+0x216/0x2d0 [ 175.747271][ C0] raw_notifier_call_chain+0xec/0x190 [ 175.752984][ C0] __dev_notify_flags+0x24d/0x4d0 [ 175.758005][ C0] dev_change_flags+0xec/0x190 [ 175.762782][ C0] do_setlink+0xb2e/0x3960 [ 175.767238][ C0] ? __nla_validate_parse+0x18cd/0x1f40 [ 175.772809][ C0] ? __kasan_check_read+0x11/0x20 [ 175.777837][ C0] rtnl_newlink+0x14dd/0x1bd0 [ 175.782516][ C0] ? rtnl_newlink+0x351/0x1bd0 [ 175.787344][ C0] ? __mutex_lock_common+0x4f5/0x2e10 [ 175.792708][ C0] ? rtnetlink_rcv_msg+0x83c/0xd40 [ 175.797810][ C0] ? rcu_lock_release+0x9/0x30 [ 175.802590][ C0] ? rtnl_setlink+0x490/0x490 [ 175.807257][ C0] rtnetlink_rcv_msg+0x889/0xd40 [ 175.812192][ C0] ? __local_bh_enable_ip+0x13a/0x240 [ 175.817563][ C0] ? local_bh_enable+0x9/0x30 [ 175.822229][ C0] ? trace_hardirqs_on+0x74/0x80 [ 175.827173][ C0] ? __local_bh_enable_ip+0x13a/0x240 [ 175.832540][ C0] ? local_bh_enable+0x1f/0x30 [ 175.837302][ C0] ? rcu_lock_release+0x9/0x30 [ 175.842075][ C0] ? rcu_lock_release+0x9/0x30 [ 175.846845][ C0] netlink_rcv_skb+0x19e/0x3d0 [ 175.851604][ C0] ? rtnetlink_bind+0x80/0x80 [ 175.856283][ C0] rtnetlink_rcv+0x1c/0x20 [ 175.860695][ C0] netlink_unicast+0x767/0x920 [ 175.865467][ C0] netlink_sendmsg+0xa31/0xd50 [ 175.870235][ C0] ? netlink_getsockopt+0x9f0/0x9f0 [ 175.875433][ C0] __sys_sendto+0x442/0x5e0 [ 175.879956][ C0] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 175.886018][ C0] ? prepare_exit_to_usermode+0x221/0x5b0 [ 175.891745][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 175.897196][ C0] __x64_sys_sendto+0xe5/0x100 [ 175.901962][ C0] do_syscall_64+0xf7/0x1c0 [ 175.906470][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 175.912370][ C0] RIP: 0033:0x414c43 [ 175.916273][ C0] Code: ff 0f 83 b0 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 2d 38 66 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 81 19 00 00 c3 48 83 ec 08 e8 87 fa ff ff [ 175.935872][ C0] RSP: 002b:00007ffc59cc2658 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 175.944283][ C0] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414c43 [ 175.952248][ C0] RDX: 000000000000002c RSI: 0000000000a72250 RDI: 0000000000000003 [ 175.960212][ C0] RBP: 0000000000000000 R08: 00007ffc59cc2660 R09: 000000000000000c [ 175.968183][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.976143][ C0] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003